CVE-2023-37237

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and execute arbitrary operating system commands via SSH.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://www.veritas.com/content/support/en_US/security/VTS23-004Vendor Advisory
https://www.veritas.com/content/support/en_US/security/VTS23-004Vendor Advisory

Timeline

Published: Jun 29, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-372385.3Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module. Successful exploita CVE-2023-372397.5Format string vulnerability in the distributed file system. Attackers who bypass the selinux permission can exploit this vulnerability to c CVE-2023-37248.8If a TLS 1.3 client gets neither a PSK (pre shared key) extension nor a KSE (key share extension) when connecting to a malicious server, a d CVE-2023-372409.1Vulnerability of missing input length verification in the distributed file system. Successful exploitation of this vulnerability may cause CVE-2023-372417.5Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart.CVE-2023-372429.8Vulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers may exploit this vulnerability to rewrite th CVE-2023-372437.8The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboo CVE-2023-372447.0The affected AutomationManager.AgentService.exe application contains a TOCTOU race condition vulnerability that allows standard users to cre CVE-2023-372459.1Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the integrity and availa CVE-2023-372467.8A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All CVE-2023-372477.8A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All CVE-2023-372487.8A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All